Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File:                     9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier:          T8Z2rS8DtcsJ1ctoORUTYyTLYZqN1ues62q7vEj3rk4=
Subject key identifier:   91:68:E2:69:6C:ED:1D:27:DF:12:58:2A:96:F1:67:32:5A:E2:24:5F
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer:       /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial:       01962E2B3D5B94059B0864DBB1FD1347879E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: dnEsALQTk7OQa6EuyeoI8kS8HGzmJB5DQTJeCCbkFks=)
                          2: pauhzMvpgkVgNc366YpahktJW_E.roa (hash: CXLZhXqRNNwNQ9k+Lw14xdWMjm1xkv/Bk4H8O3Arf58=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3d:5b:94:05:9b:08:64:db:b1:fd:13:47:87:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=9168e2696ced1d27df12582a96f167325ae2245f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:e5:11:d9:71:42:8e:f0:38:c8:50:23:c4:
                    6e:2a:ca:f1:e2:cc:3e:a4:56:e7:54:ef:99:39:b3:
                    64:ee:46:fd:e7:1f:93:cf:f8:5e:82:f7:96:28:71:
                    47:d0:1d:30:8d:8d:5e:65:0a:54:03:06:56:ed:c9:
                    a9:09:2d:1d:3a:9f:09:12:53:66:60:5b:ec:b6:85:
                    3c:44:d5:0a:82:15:dd:a0:05:57:1b:63:93:81:f3:
                    9d:ce:59:6a:d6:e5:8b:db:8b:e0:25:a5:6a:6d:0e:
                    89:4e:71:88:1c:c2:b5:45:9a:ff:37:3e:64:d1:92:
                    35:8b:03:cb:f4:59:40:99:bb:81:db:01:1a:c8:56:
                    03:43:e1:87:02:38:4a:22:61:b6:86:71:8d:4c:c1:
                    c8:1a:ef:c5:17:f6:17:6d:f0:68:d6:ff:e6:6a:95:
                    35:e1:b0:fe:c4:a1:fc:50:4b:e6:74:72:fe:ef:bc:
                    3b:7d:c6:e9:03:87:b7:16:f5:03:e3:95:3d:67:11:
                    d0:2a:3e:76:3e:8b:3c:c8:5f:f6:1f:2a:a7:80:4d:
                    60:ba:52:ee:1d:36:f7:d6:c7:ab:71:9a:4b:ed:d8:
                    17:b0:bc:8b:65:6f:e0:de:c2:ab:ac:6d:35:68:18:
                    de:d7:6c:83:f3:5b:2f:98:0a:d4:6c:ec:e5:2e:5c:
                    e4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:68:E2:69:6C:ED:1D:27:DF:12:58:2A:96:F1:67:32:5A:E2:24:5F
            X509v3 Authority Key Identifier:
                keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:08:9e:0f:4b:0e:ad:09:64:0a:26:b6:dd:ea:ae:c1:09:cb:
         5c:7e:59:8c:72:7d:e6:b4:f8:1c:99:89:d7:e8:e1:5b:04:5f:
         3d:f6:3f:00:a7:e7:5f:d2:cc:e2:e0:95:41:21:e0:0e:cf:56:
         45:ea:a2:36:7f:84:d7:ca:b8:ed:bb:f5:53:e1:c4:c3:cc:e2:
         99:5e:83:66:36:7c:c1:fd:96:3f:cc:d8:b1:37:52:82:60:48:
         74:14:b1:7a:cb:b6:f0:6e:eb:0c:a3:2a:5b:a9:d7:b5:8b:f6:
         66:f1:39:cb:ae:86:dc:8e:70:06:a8:c7:55:58:ea:11:6f:b7:
         59:53:2e:2c:c6:d5:8a:96:06:ac:07:68:b5:93:0c:cd:45:f7:
         cd:46:89:28:77:11:9a:4b:13:4e:51:4a:7e:bb:24:c2:de:c7:
         30:d3:a4:4d:2d:10:73:1d:3e:4a:4d:2a:72:33:fb:cc:61:55:
         90:30:b4:15:5f:5e:22:fd:8f:7d:74:6d:75:90:79:70:7b:0b:
         72:af:a4:eb:95:b0:1f:5e:09:22:f9:b9:30:5b:5e:de:b9:20:
         f0:42:fa:af:62:07:76:60:5c:3c:d5:ff:a2:69:7e:f5:bb:19:
         61:56:d3:c5:0a:a3:68:a9:47:50:d4:bc:f9:54:6a:e9:70:2b:
         00:1b:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----